Supabase had granted anon TRUNCATE on 96 tables. I never wrote that line, and every check I own was green.